The configuration of a new VPN tunnel does not appear in the running configuration of the PIX firewall

[TCC_2]

Core issue

This issue usually occurs if the PIX firewall is configured for failover, and configuration changes are made to a secondary firewall.

Resolution

In order to resolve this issue, complete these steps:

1. Add the new crypto map, or VPN tunnel, configuration to the Primary PIX.
   
   
2. Save the configuration. Issue the write memory command on the active unit in order to replicate the command to the standby unit, which proceeds to write its configuration to Flash memory.
   
   
3. Issue the show running-config command in order to check the running configuration. The configuration for the new VPN tunnel is now visible.

Refer to the Configuration Replication section of Using PIX Firewall Failover for more information about Failover setup.